Verifying the CPU Attack Defense Configuration

Procedure

• Run the display cpu-defend policy [ policy-name ] command to check the attack defense policy.
• Run the display cpu-defend statistics [ packet-type packet-type ] [ all | slot slot-id ] command to check statistics on packets sent to the CPU.
• Run the display cpu-defend applied [ packet-type packet-type ] { mcu | slot slot-id | all } command to check the actual CIR values after protocol packets are sent to the chip.
• Run the display cpu-defend rate [ packet-type packet-type ] [ all | slot slot-id ] command to check the rate limit of protocol packets sent to the CPU.
  

  Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.

• Run the display cpu-defend configuration [ packet-type packet-type ] [ all | slot slot-id ] command or display cpu-defend configuration [ packet-type packet-type ] { all | slot slot-id | mcu } command to check the CAR configuration for protocol packets sent to the CPU.
• Run the display cpu-defend dynamic-car history-record command to check history records on dynamic adjustment of the default CIR value of protocol packets.
  

  Only the S5720-EI, S5720-HI, S5720I-SI, S5720S-SI, S5720-SI, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S5730-HI, S5730S-EI, S5730-SI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720-LI, S6720S-EI, S6720S-LI, S6720S-SI, S6720-SI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.

• Run the display cpu-defend dynamic-adjust history-record command to check historical adaptive CPCAR adjustment records of protocol packets.
  

  Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this function.